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(57) Abstract 

A remote gaming system whereby a player can gamble against a wagering establishment (16) or state-run lottery from a remote location 
on a personal computer or portable computer device (14) where it is unnecessary to establish an on-line connection with a host computer 
associated with the wagering establishment, the gaming computer having gaming software (22) for providing a wagering opportunity and 
enabling the player to obtain gambling credit and cash-out any winnings, the host computer (30) enabling the player to purchase and redeem 
gambling credit at the remote lcoation using cryptographic protocols through a series of authenticatable message exchanges between the 
player and the establishment, the gaming computer and the host computer directly on-line, or the gaming computer having a detachable 
tamper-resistant or tamper-evident credit module associated therewith or for use with a personal computer being provided to the player with 
preloaded gambling credit. 
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SECURE IMPROVED REM OTE GAMING SYSTEM 
This Application is a continuation-in-part of 
copending Application Serial No. 08/269,248, filed on 
June 30, 1994, which is a continuation-in-part of 
5 copending Application Serial No. 08/212,348, filed on 

March 11, 1994. 

BACKGROUND 

1. Field of the Invention 

The present invention relates generally to a 
10 remote gaming system, and more particularly, to a 

remote gaming system by which a player can wager on a 
plurality of games of chance and/or future public 
events of which the outcome is uncertain, offered by 
a casino, government lottery organization, or other 
15 wagering establishment. 

2 . Description of the Prior Art 

In the past, a player wishing to wager on a game • 
of chance such as those offered in a casino or on a 
public event of which the outcome is uncertain such as 

20 sporting events, had a limited number of options. In 

order to wager on casino games such as roulette, 
blackjack, poker and the like, the player had to 
physically travel to a gaming establishment 
specifically engaged in such activities or to a 

25 location where stand-alone gambling devices such as 

video poker terminals or slot machines were available. 
Although public events such as horse races may be 
wagered on by telephone contact with an authorized 
n off-track betting" gaming establishment or its agent, 

30 such methods utilizing telephone contact have not been 

amenable to typical casino games. 

As a result of advances in computer technology 
and telecommunications, remote gaming systems have 
been devised in which a player can participate in a 

35 plurality of games of chance being offered by a 

gambling establishment without having to be physically 
located on the premises. An example is found in U.S. 
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Patent Nos. 4,339,798 and 4,467,424, both to Hedges et 
al. The Hedges Patents disclose a remote gaming 
system wherein a player proceeds to gamble against the 
casino at a remote player station which includes a 
live game display to permit the player to engage in 
actual games of chance as they are being played in 
real-time at a croupier station comprised of one or 
more gaming tables in the casino. The player station 
includes a changeable keyboard communicating with a 
microprocessor for displaying a selected one of a 
plurality of wagering possibilities corresponding to 
a selected one of the plurality of games being played 
and for displaying the results of the game being 
played. The player becomes part of the game as if he 
15 or she were actually present at the gaming table in 

the casino. To provide a secure communications link, 
the remote gaming station communicates with the 
croupier station and a credit control station through 
an encryption/decryption device to prevent tampering 
20 by unauthorized sources. 

While such a system provides a means by which a 
player can gamble from a remote location, its primary 
disadvantage resides in the fact that the player can 
gamble only by participating in games being actually 
25 conducted in the gaming establishment and monitored 

over real-time closed circuit video. Moreover, such 
a system has limited practicality since the player can 
• only gamble on a specialized gaming station which must 
be electronically linked to the casino. It would 
30 therefore be highly desirable to provide a remote 

gaming system by which a player could engage in 
gambling on a gaming computer at a remote location at 
the player's convenience where the casino provides for 
the purchase and redemption of casino credit, 
35 notwithstanding the absence of any direct electronic 

communication link between the gaming computer and the 
casino. 
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SUMMARY OF THE IN VENTION 
Accordingly, it is an object of the present 
invention to provide a remote gaining system by which 
the player can wager on any one of a plurality of 
5 games of chance typically offered by a wagering 

establishment (e.g., a casino or whatever entity is 
offering to bet against the player) at the player's 
convenience. 

It is another object of the present invention to 

10 provide a remote gaming system by which the player can 

wager against the wagering establishment on any one of 
a plurality of wagering opportunities such as games of 
chance generated by computer software installed or 
loaded on any personal computer. 

15 it is a further object of the invention to 

provide a remote gaming system by which a player can 
wager against the wagering establishment on a 
conventional multi-media apparatus (e.g., a NINTENDO 
apparatus coupled to a television set) through 

20 compatible plug-in data storage media. 

It is yet another object of the invention to 
provide a remote gaming system by which a player can 
purchase and redeem wagering credit from remote 
locations without the need for an on-line electronic 

25 communications link to be established between the 

player's gaming computer and the wagering 
establishment, 

It is still another object of the invention to 
provide a remote gaming system by which a player can 

30 wager on any one of a plurality of games of chance 

generated by software installed or loaded on a 
dedicated gaming computer, including a hand-held 
portable device, which can be provided to the player, 
yet need not be electronically linked on-line to the 

35 wagering establishment for purposes of gambling, 

purchasing and redeeming gambling credit. 

It is yet another object of the invention to 
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provide a remote gaming system wherein authenticatable 
messages communicated between, read and authenticated 
by a remote gaming computer, including a dedicated 
machine for wagering, a general-purpose game machine, 
a personal computer or personal digital assistant 
(PDA) , or any other device for computing and 
communicating with the house or wagering 
establishment, and a host computer associated with 
the wagering establishment, either on-line (including 
wireless electronic communication hardware) or off- 
line (orally with an agent or electronic 
communications over the telephone, but where no 
connection is necessary between the gaming computer 
and the wagering establishment) , prevent unauthorized 
15 users from gaining access to or fraudulently obtaining 

or redeeming gambling credit. 

It is another object of the present invention to 
provide a remote gaming system in which a gaming 
computer and/or host computer associated with the 
20 wagering establishment restricts access to wagering 

opportunities by means of hardware or software for 
authenticating a personal identification number (PIN) 
or passphrase. 

It is still another object of the present 
25 invention to provide a remote gaming system in which 

a gaming computer and/or host computer associated with 
the wagering establishment restricts access to 
• wagering opportunities, using authentication from some 
external credit card, smart card, funds transfer 
30 system, digital cash system, or other payment system- 

It is yet another object of the invention to 
provide a remote gaming system in which a gaming 
computer and/ or host computer associated with the 
wagering establishment restricts access to wagering 
35 opportunities utilizing biometrics including, but not 

limited to, fingerprints, voiceprints, retinal-prints 
and the like. 
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It is still another object of the invention to 
provide a remote gaming system in which a gaming 
computer and/ or host computer associated with the 
wagering establishment restricts access to wagering 
5 opportunities using a physical access token or 

physical key. 

It is a further object of the invention to provide 
a remote gaming system in which a gaming computer 
and/ or a host computer associated with the wagering 
10 establishment restricts access to wagering 

opportunities using authorization transferred from a 
remote system, whether or not that system is working 
as and agent or provider of the wagering 
opportunities . 

15 it is another object of the invention to provide 

a remote gaming system in which a gaming computer 
and/or host computer associated with the wagering 
establishment, in addition to or in lieu of other 
security measures, restricts access to wagering 

20 opportunities by consulting an internal or external 

database having stored lists of banned and/or valid 
identification codes, including but not limited to EFT 
account numbers, userlDs, credit card account numbers, 
and the like. 

25 It is a further object of the present invention to 

provide a remote gaming system which is made secure by 
incorporating cryptographic protocols or methods such 
as digital signatures, one-way hashes, zero-knowledge 
proofs, encryption, message-authentication codes , bit- 

30 commitment protocols and the like 

It is a further object of the present invention to 
provide a remote gaming system which is made secure by 
utilizing internal checksums and audit sums. 

It is another object of the invention to provide 

35 a remote gaming system which is made secure by using 

hardened "agents" of the "house", i.e., the wagering 
establishment, in the form of software and/ or hardware 
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devices, humans, or any or all of these, in a remote 
or nearby location, or installed in or on a remote 
gaming computer. 

It is still another object of the invention to 
5 provide a remote gaming system which is made secure by 

utilizing digital time stamping to generate 
authenticatable messages to be read and authenticated 
by a host computer associated with the wagering 
establishment for verification. 

10 It is a further object of the invention to provide 

a remote gaming system which is made secure by 
incorporating secure timers, counters, running hashes 
or checksums, digital signatures, or other hidden 
values to frustrate attempts to defraud or tamper with 

15 the gaming software of data storage media associated 

with the gaming computer. 

It is yet another object of the invention to- 
provide a remote gaming system which is made secure by 
employing batch communications between the gaming 

20 computer and the wagering establishment. 

It is still another object of the invention to 
provide a remote gaming system in which a player 
receives a tamper-resistant or tamper-evident 
read/write device from the wagering establishment 

25 containing data storage media for dedicated gaming 

software which can be linked to or installed on any 
personal computer, yet is inspectable by the wagering 
. establishment to prevent unauthorized manipulation of, 
or alteration to, the software. 

30 It is still another object of the invention to 

provide a remote gaming system in which the gaming 
and/or banking software is embodied in data storage 
media such as, for example, a computer disk, where the 
unique magnetic signature of that disk is readable by 

35 the gaming computer as an authenticatable message for 

authentication by the gaming computer and/or the 
wagering establishment host computer to make 
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unauthorized duplication of the disk or alteration to 
data on the disk detectable by the wagering 

establishment . 

It is still another object of the invention to 
provide a remote gaming system by which a player can 
wager on future public or external events of which the 
outcome is uncertain such as a lottery, either through 
an on-line connection between a gaming computer and 
the wagering establishment, or off-line where the 
player's wager is time-stamped to generate an 
authent icatable message , representing the player ' s 
choice of wagering elements (i.e., numbers) for a 
given lottery event (occurring at some time in the 
future) and, including, at least one of a date/ time 
15 stamp or authenticated time message, player's 

identification code, and computer/software 

identification code. 

It is yet another object of the invention to 
provide a remote gaming system by which a player can 
20 obtain and redeem wagering credit from the wagering 

establishment embodied in tamper-resistant or tamper- 
evident data memory media which interface with a 
remote gaming computer. 

It is still another object of the invention to 
25 provide a remote gaming system by which a completely 

self-contained, dedicated gambling personal digital 
assistant may be obtained with a preprogrammed and/or 
predetermined amount of non-renewable credit embodied 
in gaming software installed on or loadable into the 
30 digital assistant. 

It is a further object of the invention to provide 
a remote gaming system by which a player can engage in 
a game of skill (e.g., a crossword puzzle) residing in 
software installed on a dedicated gambling personal 
35 digital assistant having a preprogrammed and/or 

predetermined amount of non-renewable gambling credit. 
It is yet another object of the invention to 
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provide a remote gaming system in which winnings and 
collection on losses may be authorized by means of a 
digital cash protocol. 

It is a further object of the invention to provide 
5 a remote gaming system in which payment of winnings 

and collection on losses is authorized by means of an 
electronic funds transfer mechanism. 

It is still another object of the invention to 
provide a remote gaming system in which payment of 
10 winnings and collection on losses is authorized by 

means of a credit card authorization mechanism. 

It is yet another object of the invention to 
provide a remote gaming system in which payment of 
winnings and collection on losses is authorized 
15 through the wagering establishment or its agents 

through communication between a remote gaming computer 
and a host computer associated with the wagering 
establishment. 

It is still another object of the invention to 
20 provide a remote gaming system in which winnings and 

collection on losses are paid directly in currency 
form. 

It is a further object of the invention to provide 
a remote gaming system in which all gambling credit is 

25 loaded into a gaming computer by the wagering 

establishment or its agent (s) prior to providing the 
player with the gaming computer. 

It is still another object of the invention to 
provide a remote gaming system in which a premium 

30 application enables a player who purchases a product 

such as a computer, or software on data storage media, 
to win something as determined by the output of a 
gaming program embedded within such product. 

It is yet another object of the invention to 

3 5 provide a remote gaming system by which a player 

wagering at a remote location is subject to 
predetermined limitations on winnings by a wagering 
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establishment . 

In accordance with the above objects and other 
objects which will become apparent hereinafter, the 
present invention provides a remote gaming system 
5 which enables a player to gamble against a wagering 

establishment using a gaming computer at a remote 
location. The gaming computer may or may not be 
electronically linked, i-e., "on-line", to a host 
computer associated with the wagering establishment 

10 while gambling takes place. The term "wagering 

establishment" as used herein is intended to include 
authorized agents or other parties which act on behalf 
of the wagering establishment to implement the gaming 
process. The term "host computer" includes a single 

15 device, multiple devices and/or computer networks and 

systems. The gaming computer can be any personal 
computer, hand-held computer device (e.g., a personal 
digital assistant) , or multi-media apparatus which 
functions as the gaming computer (e.g., a NINTENDO or 

20 like apparatus) , and may or may not be a dedicated 

gambling computer provided by the wagering 
establishment. If provided by the wagering 

establishment, the gaming computer can be preloaded 
with gaming software. If the gaming computer is a 

25 conventional personal computer, the gaming software is 

either preinstalled on a secure data storage media 
device, e.g. a hard disk, CD-ROM, etc., or module 
provided by the wagering establishment, or installed 
directly on the gaming computer by the player. 

30 The gaming software includes a game program and a 

banking program. The game program generates a 
plurality of games of chance typically offered by the 
wagering establishment, e.g., blackjack, roulette, 
craps, poker, slots, etc., games of skill or makes 

35 available wagering on external events or future public 

events of which the outcome is uncertain, e.g., a 
lottery. The banking program provides for the 



WO 96/00950 



PCT/US95/08206 



10 



purchase or loading of gambling credit into a banking 
file from the wagering establishment to enable 
gambling, and increments or decrements the player's 
account balance to enable the player to cash-out any 
5 gambling winnings. The term "gambling credit" as used 

herein, means purchased credit, accumulated gambling 
winnings, collection on losses and the like. The 
gaming software may also include kn audit program 
which records the outcome of each wager and the data 

10 communicated between the player and the wagering 

establishment as read, authenticated and /or generated 
by the gaming computer in order to effect gambling, 
and the purchase and redemption of gambling credit. 
The wagering establishment has a host computer 

15 with software containing a banking program which 

enables players to purchase, accumulate and redeem 
gambling credit at remote locations, even if no on- 
line communications exist with the gaming computer, 
and an audit program for recording such transactions. 

20 This may be accomplished, in one preferred embodiment 

of the invention, by communicating a plurality of 
authenticatable messages between the gaming computer 
and the host computer, which messages are respectively 
read and authenticated by each device, either through 

25 oral communications between the player and the 

wagering establishment, e.g., such as via an automated 
public telephone network having interactive voice 
.capabilities using a touch-tone phone. The words 
"authenticatable", and "authenticate" as disclosed and 

3 0 claimed herein include cryptographic protocols such as 

encryption and decryption, digital signatures, one-way 
hashes, checksums and the like. The utilization of 
authenticatable messages is one way to prevent a third 
party or a verified player from gaining unauthorized 

3 5 access to the system and then attempting to 

fraudulently obtain or redeem gambling credit and/or 
tamper with the game program to produce altered 
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wagering opportunities having only a favorable 
outcome. Alternatively, gambling credit can be 
"built-in" or preinstalled on a tamper-evident or 
tamper-resistant module for installation on a 
conventional personal computer, or pre-installed on a 
dedicated gaming computer provided by the wagering 
establishment. In the off-line embodiment, the 
automated public telephone network or "agent" is 
associated with the host computer of the wagering 
establishment, but it is not necessary to have a 
direct electronic on-line connection between the 
gaming computer and the host computer. 

If the gaming computer is networked to the host 
computer, the connection may or may not serve to 
regulate or control the simulation of casino games on 
the gaming computer by the gaming software. For 
example, the connection may serve to have the host 
computer keep a record or audit-trail of all or 
selected activities taking place at the gaming 
computer for purposes of additional verification or 
security. Alternatively, the connection may be of a 
controlled nature to vary the odds of a given wager 
based upon any of a variety of factors such as 
gambling duration or a progressively increasing 
jackpot (e.g., in a slot machine simulation). In such 
an on-line embodiment, security and player 
verification can be obtained by utilizing a stand- 
alone secure message generation and authentication 
device, such as, for example, an encryption/decryption 
unit of the type commonly employed in making wireless 
money transfers. This device generates an 

authenticatable verification code based upon the 
user's personal identification code and possibly a 
second code provided to the user from the host 
computer or stored in the stand-alone authentication 
device to prevent an unauthorized user from obtaining 
on-line access upon having stolen a user's personal 
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identification code. 

At all times, each wager by the player generates 
an electronic audit-trail on the gaming computer, the 
host computer and/ or on any networked computers by 
recording the amount of each wager, the outcome of 
each gambling event and any resulting gambling 
earnings or losses, in an authenticatable message or 
a series of messages which are read and authenticated 
by the host computer and/ or the gaming computer. The 
financial resolution of each wager is cumulatively 
tracked by the software on the gaming computer and 
perhaps also on any networked computers, so that the 
player is able to constantly monitor his or her 
gambling credit balance with the wagering 
establishment. 

A player gambles in substantially the same way he 
or she does in a casino. The player chooses which 
games to play as presented by the gaming software, the 
amount of each wager and the length of time each game 
is played. The player may remain active over several 
different gaming sessions which may take place at 
several different times and/or places. The player may 
at any time place wagers which are for practice only 
which do not affect the player's gambling credit 
balance. As an option, the player's gambling credit 
balance may be transferred and stored on data storage 
media which can be installed on other computers where 
software has been, or can be, installed to recognize 
the player's gambling credit balance. The player may 
then continue to wager on any of such other computers. 
Whenever the player wishes to cash-out his or her 
gambling credit, redemption from the wagering 
establishment may be implemented by contacting the 
wagering establishment by telephone in an "off-line" 
embodiment, either through an automated telephone 
network with voice capabilities, or a live agent, or 
by communicating on-line in an "on-line" embodiment. 
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in one embodiment described above, when the player 
desires to cash out, a series of authentica table 
messages are exchanged with the host computer, such as 
orally through an automated telephone network, or are 
5 transmitted electronically on-line by conventional 

means in the on-line embodiment. In the off-line 
embodiment, these authenticatable messages are 
generated by the gaming computer software and the host 
computer software, and communicated between and read 

10 by the gaming computer and host computer for 

authentication to verify the player's identity and 
authenticity of the player's gambling credit account 
prior to cashing-out gambling credit. In the on-line 
embodiment, a stand-alone device or software 

15 associated with the gaming computer generates an 

authenticatable log-on or confirmation message for 
verification by the host computer. Alternatively, 
where the gaming computer itself, e.g., a personal 
digital assistant, is provided to the player by the 

20 wagering establishment, it or a tamper-resistant or 

tamper-evident plug-in module may be physically 
returned to the wagering establishment for credit 
redemption. The module includes data-storage media 
preferably disposed in an inspectable tamper-resistant 

25 or tamper-evident casing which can be examined by the 

wagering establishment for any indication of 
tampering. Such gambling credit can be redeemed from 
the wagering establishment in any of a variety of 
forms of payment including, but not limited to, cash, 

3 0 bank-wire transfers, credits or some other form of 

payment mutually agreed to by the player and the 
wagering establishment . 

BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1A is a schematic view of the remote gaming 

3 5 system in a first off-line embodiment; 

FIG. IB is a schematic view of the remote gaming 
system in a second off-line embodiment; 
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FIG. 1C is a schematic view of the remote gaming 
system in a third off-line embodiment; 

FIG. 2 is a schematic view of the remote gaming 
system in an on-line embodiment; 

FIG. 3 is a schematic view of a gaming computer 
connected to a tamper-resistant or tamper-evident 
read/write data storage media device provided by the 
wagering establishment; 

FIG. 4 is a flowchart of the start-up and 
registration sequence in the off-line embodiment; 

FIG. 5 is a flowchart of the handshake recognition 
sequence in the off-line embodiment; 

FIG • 6 is a flowchart of the purchase credit 
sequence in the off-line embodiment; 

FIG. 7A is a flowchart of the wagering sequence 
for games of chance generated by the game program in 
the off-line embodiment; 

FIG. 7B-1-2 is a flowchart of the wagering 
sequence for an off-line non-registered lottery system 
embodiment; 

FIG. 7C-1-5 is a flowchart of the wagering 
sequence in an off-line registered lottery system 
embodiment ; 

FIG. 8 is a flowchart of the credit cash-out 
sequence in the off-line embodiment; 

FIG. 9 is a flowchart of the registration and 
start-up sequence in the on-line embodiment; 

FIG. 10 is the purchase credit sequence in the 
on-line embodiment ; 

FIG. 11 is a flowchart of the wagering sequence in 
the on-line embodiment; 

FIG. 12 is a flowchart of the credit cash-out 
sequence in the on-line embodiment; 

FIG. 13 is a schematic of a memory chip made 
secure by an external tamper-resistant or tamper- 
evident structure; 

FIG. 14 is a schematic of a first means for 
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verifying the integrity of the gaming software; 

FIG. 15A is a schematic of a second means for 
verifying the integrity of the gaming software; 

FIG. 15B is a schematic of a third means for 
verifying the integrity of the gaming software; 

FIG. 15C is a schematic of a fourth means for 
verifying the integrity of the gaming software; and 

FIG. 15D is a schematic of a fifth means for 
verifying the integrity of the gaming software. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

With reference to the several views of the 
drawings, there is depicted a remote gaming system 
generally characterized by the reference numeral 10 by 
which a player 12 with access to a computer 14 ("the 
gaming computer") wagers on a plurality of games of 
chance, or on future public events where the outcome 
of such events is uncertain, offered by a casino, 
government lottery organization or other wagering 
establishment 16. For convenience, these and any 
authorized agent thereof will be generally referred to 
hereinafter as "the wagering establishment." 

Referring now to FIG. 1A, the player 12 has access 
to gaming computer 14 having a video display 18 and a 
keyboard 20. The gaming computer 14 can be a personal 
home computer, lap-top, or hand-held personal digital 
assistant device, which may or may not be a dedicated 
gaming apparatus provided by wagering establishment 
16, or may be a multi-media apparatus, e.g. , a 
NINTENDO or similar device for use with a television 
or the like. The gaming computer 14 can be located at 
the wagering establishment 16 or some other 
establishment, e.g., a lottery ticket vendor, or 
off -site at a remote location. A gaming computer 14 
which is located at the wagering establishment 16 can 
still be classified as "remote" in the context of the 
invention claimed herein. In this regard, it is 
anticipated that a casino could provide players, in 
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for example the hotel where the casino is located, 
with a dedicated gaming computer 14 which could be 
used to gamble either within or outside of the 
physical boundaries of the casino. A primary 
5 advantage of providing the player 12 with a wagering 

establishment-furnished gaming computer 14 is greater 
security, specifically with regard to making 
unauthorized access to the data storage media such as 
a computer disk drive or module more difficult. 

10 Moreover, in a dedicated gaming computer, the keyboard 

20 can be customized with specialized function keys 
identifying commands, e.g., keys dedicated to 
blackjack might have indicia stating "hit me", 
"stand", "purchase insurance", etc., which the player 

15 selects to proceed to gamble on the various games of 

chance, games of skill or future events of which the 
outcome is uncertain, offered by the wagering 
establishment 16. Gaming computer 14 operates special 
gaming software 22 comprised of a game program 24, a 

20 banking program 26 and optionally, an audit program 

27. Gaming software 22 can be preinstalled on a 
dedicated gaming computer 14 provided by the wagering 
establishment 16, preinstalled in an external 
tamper-resistant or tamper-evident read/write data 

25 storage media apparatus 28 provided by wagering 

establishment 16 which interfaces with a personal 
computer functioning as the gaming computer 14 as 
.shown in FIG. 3, or installed directly on the personal 
computer by the player 12. Furthermore, the gaming 

30 software 22 may be made available to the player 12 in 

a tamper-resistant or tamper-evident plug-in module 
for use with a conventional personal computer or 
multi-media apparatus which functions as the gaming 
computer 14, to be described in more detail 

35 hereinbelow. 

It is critical that the wagering establishment 16 
be able to determine if the software itself or data 
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associated therewith was copied, tampered with or in 
any way altered, otherwise an unscrupulous player 12 
could make a plurality of copies and keep playing with 
identical disks until such time that one of the copied 
5 disks produced a favorable outcome, or the player 12 

could alter the software itself in an attempt to 
control the outcome, the winnings or losses, or a 
combination thereof, i-e., a dishonest player 12 
modifies the software code of the gaming software 22 

10 in such a way as to make the software generate a 

winning outcome more frequently than chance would 
dictate (e.g., in a roulette simulation, causing the 
roulette wheel to land on a more favorable number more 
frequently) . This could be achieved by replacing the 

15 software in its entirety or by modifying certain code 

lines or software instructions of the program, either 
physically or by some other externally applied 
influence such as high-intensity electromagnetic 
radiation, e.g., an RF field. Of course, the most 

20 secure system is an on-line arrangement where the 

gaming software 74 resides in a host computer 3 0 
associated with and/or on the premises of the wagering 
establishment (FIG . 2). The most difficult security 
issues with regard to tampering arise in embodiments 

25 where the wagering establishment 16 provides the 

player 12 with software for use on a remotely disposed 
gaming computer 14 or with a dedicated gaming computer 
14 itself (e.g., a PDA). In this connection, the 
present invention provides a variety of means for 

30 ensuring that system security and integrity are not 

compromised. 

In one application, software can be provided which 
instructs the gaming computer 14 to read the unique 
magnetic characteristics, i.e., "fingerprint," of the 
35 specific disk or data storage media on which gaming 

software 22 is made available for installation, for 
the purpose of creating a unique authenticatable 
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message to be read and authenticated by the wagering 
establishment 16 to reveal to the wagering 
establishment 16 any unauthorized duplication of, or 
tampering with, data on that disk or data storage 
5 media- Alternatively, a plug-in device can interface 

with the gaming computer disk drive to read a portion 
of the disk to acquire the unique magnetic 
characteristics of the disk, or the wagering 
establishment 16 can utilize the same hardware and/or 

10 software to obtain this magnetic signature and keep 

this information on file for use at some future time 
should tampering be suspected, or as a prerequisite to 
authorizing any gambling functions to a specific 
player 12, e.g., this data can be registered with or 

15 required by the wagering establishment 16 prior to 

allowing the player 12 to cash-out any gambling 
winnings. 

In another embodiment shown schematically in FIG. 
13, the gaming software 22 resides on a tamper- 

20 resistant or tamper-evident chip 23 disposed within or 

otherwise associated with the gaming computer 14 , 
i.e., where a dedicated device is provided by the 
wagering establishment 16, or otherwise connected to 
the gaming computer 14, e.g., a secure, external disk 

25 drive connected to a conventional personal computer. 

The chip 23 can be situated within a physical casing 
84 which is isolated and unaccessible from any 
. external data port connection. In an exemplary 
embodiment, the chip 2 3 can be housed within special 

30 seals, insulation, wrapping, or the like 86, which can 

be inspected by the wagering establishment 16 to 
reveal whether any authorized attempts were made to 
remove, alter or otherwise tamper with the chip 23. 
Thus, the wagering establishment 16 can readily 

3 5 ascertain if the player tampered with the gaming 

software and, if such tampering is discovered, it can 
deny such player any claimed winnings and/or future 
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gambling credit. 

In yet another embodiment shown schematically in 
FIG. 14, unique mathematical attributes can be derived 
from certain characteristics of the software code in 
5 a self -test process. To perform such a test, the 

characteristics of the code are kept secret and are 
known only to the wagering establishment 16 by using 
checksums, one-way hashes and other cryptographic 
protocols, including, for example, a check-digit type 

10 algorithm based upon the sum of the bits located in 

certain parts of the program, for example, lines 476 
through 655 of the code as shown. Alternatively, the 
self-test can verify special codes which are embedded 
within the software or code instructions in some 

15 predetermined random manner known only to the wagering 

establishment 16. 

In a variation of the above shown schematically in 
FIG. ISA, external keys known only to the wagering 
establishment 16 can be applied to intermittently or 

20 continuously verify whether the software code has been 

or is being tampered with, by causing altered software 
to malfunction and shut down the gaming application in 
the computer 14. The use of external keys may or may 
not employ cryptographic protocols such as encryption 

25 to safeguard against their being somehow forged by the 

player 12. This can be implemented in several ways, 
including, but not limited to: (1) broadcasting a 
continuous or intermittent authenticatable message, 
such as an encoded or encrypted external signal, e.g., 

30 RF, from the wagering establishment 16, which is 

received by receiving means 88 operably associated 
with the gaming computer 14, where such signals are 
subsequently authenticated by the gaming computer 14, 
converted into the appropriate form and used by the 

35 gaming software 22 to verify or enable the same (FIG. 

15B) ; (2) having the player 12 physically enter a 
message on an intermittent basis (FIG. 15C) ; or (3) 
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utilizing an internally generated clock signal 
furnished by a hardened, tamper-resistant or 
tamper-evident clock 89 (FIG. 15D) . In this 

connection, the chip 23, or even the gaming computer 
5 14 (if provided by the wagering establishment 16) , may 

be shielded from electromagnetic interference (EMI) by 
conventional methods to prevent unauthorized attempts 
to influence the gaming software with externally 
generated electromagnetic radiation . 

10 Aside from the use of external keys, the gaming 

software 22 can be made to require the acquisition of 
data from an external source in order to function. 
For example, a wireless broadcast of an 
authenticatable message comprised of random numbers 

15 and/or alphanumeric data (possibly encrypted) might be 

accessed by the gaming software 22 such that these 
random numbers are called upon by the program as a 
basis to select and/or generate a wagering outcome in 
a predictable or unpredictable manner. Such external 

20 input may be incorporated into a hardened, tamper- 

resistant or tamper-evident plug-in device or module, 
which interfaces with the gaming computer 14. 

Another way to prevent fraudulent attempts to 
alter the gaming software 22, is through the use of an 

25 audit program 27 which can only be accessed by the 

wagering establishment 16. To prevent a forged audit 
trail, the audit program 37 might, by way of example, 
. create dozens or even hundreds of data strings (e.g. , 
such as in a roulette simulation, data strings 

3 0 corresponding to spins of the roulette wheel each time 

the wheel is spun) , where all such data is then 
recorded for future verification should the wagering 
establishment 16 suspect tampering with the gaming 
software 22. 

35 It will be appreciated by persons skilled in the 

art that the gaming software 22 can be arranged such 
that a message or data-string of alphanumeric codes, 
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which are either preloaded into each gaming computer 
14, or provided on a disk or plug-in uncopyable 
module, can be used to discover any tampering with the 
software, disk or module by the player 12. In this 
5 connection, the code sequence can be made different 

for each gaming computer 14 or module, and copies of 
such codes can be kept on file by the wagering 
establishment 16. These codes may be used to provide 
the basis for generating a random outcome of each 

10 gaming event, and can thereby provide evidence of 

tampering. In other words, a specific arrangement of 
codes might correspond to a certain outcome of a 
wagering event (e.g., the Roulette wheel lands on 
"5") . Even though these codes are known to the 

15 wagering establishment 16, they are sequenced to 

ensure a random outcome - something which could be 
verified by an independent third party. If a player 
12 seeks to modify the gaming software, the altered 
software instructions and/or codes could be discovered 

20 upon comparison of the same with the originals on file 

with, and known only to, the wagering establishment 
16. 

As another means of preventing player fraud, an 
element of "double-randomness" can be implemented by 

25 requiring the player 12 to press a button for each 

selection or desired response on the gaming computer 
14 twice, with the time interval between selections 
(i.e., in milliseconds) used to address and enable a 
specific preprogrammed random outcome codified in 

30 corresponding software codes. 

The game program 24 permits player 12 to wager on 
any one of a plurality of wagering opportunities, 
including games of chance, future public or external 
events where the outcome is uncertain or games of 

35 skill, e.g., a crossword puzzle. The games of chance 

are generated on gaming computer 14 by game program 2 4 
in accordance with conventional techniques and 



include, but are not limited to, common casino 
wagering activities such as blackjack, craps, 
roulette, poker, slots and the like. Each game offers 
opportunities for the player 12 to place wagers on one 
or more various wagering elements within a given 
wagering event depending upon the rules applicable to 
that game. This will be described in more detail 
below. 

Game program 24 can be made to accept wagers on 
future public or external events where the outcomes of 
such events are uncertain as in, for example, sporting 
events such as a football game or a boxing match, or 
a state-run or other lottery. This can be implemented 
by establishing communications, either orally via a 
public telephone network, or electronically, with the 
wagering establishment 16 in order to place, register 
and confirm bets. The wager is placed on the gaming 
computer 14, which, through the gaming software 22 
produces a message for registration with the wagering 
establishment 16. This message is then time stamped 
by the wagering establishment 16 to form an 
authenticatable message, which authenticatable message 
can only be authenticated by the wagering 
establishment 16, using appropriate software 
instructions or hardware to lock in the bet or fix the 
time of the wager for the purpose of ascertaining the 
proper payoff. This implementation will be described 
in detail below. Similarly, games of skill such as a 
crossword puzzle can be verified through the use of an 
authenticated date/time message which fixes the time 
of completion of the game, such that prizes are later 
awarded based upon the first player to complete that 
game. 

The banking program 2 6 enables the player 12 to 
wager with available gambling credit and "cash-out" 
any gambling winnings. In certain embodiments, the 
banking program 26 facilitates the purchase of credit 
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from the wagering establishment 16 where such credit 
is "loaded" into an appropriate datafile in the gaming 
computer in the form of an authenticatable message or 
a series of authenticatable messages. Alternatively, 
as shown in FIG. 1C, the banking program can receive 
gambling credit electronically, such as from an 
electronic card reader 91 compatible with credit or 
debit cards 93 in a conventional manner, or by 
downloading the credit from a plug-in tamper resistant 
or tamper-evident credit module 90. 

As one way of ensuring security in the credit 
purchase/redemption process, the banking program 2 6 or 
a dedicated authentication device provides for the 
authentication and generation of authenticatable 
messages, such as, for example, an 

encryption/decryption apparatus utilizing an 
encryption and decryption algorithm of the type known 
in the art, e.g., public-key, to encrypt and decrypt 
alphanumeric messages exchanged between the player 12 
and the wagering establishment 16 which are input to, 
communicated between and generated by the gaming 
computer 14 and the host computer 30. These messages 
can be communicated between the player 12 and the 
wagering establishment 16, including its authorized 
"agent" 38 through a public telephone network 40. The 
term "agent" is intended to include an automated 
telephone or like system having interactive voice 
capabilities, which generates computerized 

instructions communicated to the player 12 over the 
phone to prompt the player 12 to communicate responses 
to the wagering establishment 16 by pressing the 
appropriate numbers or symbols on the touch-tone phone 
3 6 by conventional methods which are well known. 

The host computer 3 0 has gaming software 3 3 
operably associated therewith, which software includes 
a banking program 35 and an audit program 37. The 
host computer 3 0 either includes or communicates with 
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a dedicated device or software 3 9 for generating and 
authenticating authenticatable messages using 
cryptographic protocols with keys or secret algorithms 
known only to the wagering establishment 16. In this 
5 manner, the wagering establishment 16 enables a 

verified player 12 to purchase and redeem gambling 
credit at the remote location, notwithstanding the 
absence of any on-line link to the wagering 
establishment 16 and/ or the host computer 3 0 

10 associated with the wagering establishment 16. The 

sequence of steps in the illustrative embodiment 
required to purchase and cash-out gambling credit by 
exchanging and authenticating authenticatable messages 
off-line are described in greater detail below. 

15 In the usual course of practicing the invention, 

FIG. 4 depicts a flowchart of a representative 
start-up and registration sequence in an off-line 
embodiment which must occur prior to wagering. Player 
12 first registers various personal information with 

20 the wagering establishment 16 and obtains an 

alphanumeric personal identification message or code 
32. The wagering establishment 16 provides player 12 
with gaming software 22 containing a game program 24, 
a banking program 26, and an audit program 27 as 

25 described above, having an associated software 

identification message or code 34. The gaming 
software 22 may be independently tested, verified and 
. provided on data storage media in a sealed envelope by 
a third party. Such data storage media can include a 

3 0 hard disk, floppy disk, CD-ROM and the like. The 

wagering establishment 16 then provides an 
alphanumeric start-up identification message or code 
3 3 which the player 12 enters into the gaming computer 
to run the gaming software 22. Optionally, the gaming 

35 computer 14 may utilize biometrics including, but not 

limited to, fingerprints, voiceprints, retinal-prints 
and the like, using an appropriate chip or recognition 
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software, to deny access to any unauthorized user- 
Such hardware and/or software is known in the art. 

The gaming software 22 is programmed to prompt the 
player 12 with an inquiry as to whether a current 
session is for practice or to place a wager. If it is 
a practice session, the game program 24 generates a 
plurality of game choices and a confirmation that the 
games are being played for practice only. If the 
player 12 chooses to engage in gambling, the banking 
program 26 will permit actual wagering to the extent 
that there is sufficient gambling credit available in 
the player's account to cover all bets. If there is 
insufficient gambling credit, the player 12 must 
contact the wagering establishment 16 and go through 
15 the purchase credit sequence described below. As 

noted above, the gaming computer 14 may or may not be 
on-line with the wagering establishment computer 30, 
If gaming computer 14 is off-line, greater flexibility 
in terms of being able to engage in gambling at 
20 virtually any location is possible. As discussed 

above, a series of authenticatable messages are 
communicated between the player 12 and the wagering 
establishment 16 permit credit purchase and redemption 
at a remote location to be governed by the wagering 
25 establishment 16 notwithstanding the absence of an on- 

line link between the gaming computer 14 and the host 
computer 30. Alternatively, gaming computer 14 can be 
networked on-line to the host computer 3 0 through a 
public telephone network 29 such that host computer 30 
30 monitors and controls all or part of the activities 

taking place on the remote gaming computer 14 (see 
FIG. 2). 

In the off-line embodiment shown in FIG. 1, the 
player 12 places a call to the wagering establishment 
35 16 by way of telephone 36 and communicates via the 

public telephone network 4 0 to obtain or redeem 
gambling credit. If player 12 already has credit, 
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gaining software 22 will permit wagering on any of the 
games of chance, future or external events or games 
of skill, provided by game program 24 upon receiving 
player 12 's appropriate personal identification 
5 message 32. If player 12 requires credit to play, the 

wagering establishment 16 must be contacted and the 
following series of steps are followed for the purpose 
of verifying the player's identity and confirming that 
the player is utilizing gaming software 22 registered 

10 to his or her personal identification message 32. 

Whenever player 12 contacts the wagering 
establishment 16, he or she goes through what is 
referred to as a handshake recognition sequence, the 
verification of the player's identity with the 

15 wagering establishment 16. In this regard, as 

depicted in the flowchart of FIG. 5, player 12 first 
calls the wagering establishment 16 on telephone 36. 
The wagering establishment 16 queries player 12 for 
his or her unique personal identification message 32 

20 and software identification message 34. These are 

provided to the wagering establishment 16, and are 
read by and authenticated by the host computer 30, 
which in turn generates an authenticatable handshake 
message 42 which is provided to player 12 for entry 

25 into gaming computer 14. Gaming computer 14 reads and 

authenticates handshake message 42 and then generates 
an authenticatable recognition response message 44 
which is provided to the wagering establishment 16. 
The host computer 30 reads and authenticates 

30 recognition response message 44 to verify the player 

12 's identity and to confirm that the specific gaming 
software 22 is registered to that player 12. The 
verified player 12 then proceeds with appropriate 
interaction by the wagering establishment 16. 

35 FIG. 6 is a flowchart depicting a first embodiment 

of a purchase credit sequence in the off-line 
embodiment. Player 12 first contacts the wagering 
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establishment 16 and establishes his or her 
identification through the handshake sequence depicted 
in FIG. 5 and described above. The host computer 3 0 
generates an authenticatable banking program 
5 activation message 46, and the wagering establishment 

16 provides the activation message 4 6 to the player 12 
for the purpose of allowing player 12 to access the 
credit purchasing/redemption function of the banking 
program 26 in gaming computer 14. Player 12 then 

10 enters the amount of gambling credit requested, and 

the authentication software 29 combines the personal 
identification message 32 and software identification 
message 34 to generate an authenticatable credit 
request message 48, which embodies the numeric value 

15 of the amount of gambling credit requested and is 

unique to player 12 and his or her gaming software 22. 
The player 12 communicates the credit request message 
48 to the wagering establishment 16, where the host 
computer 30 reads and authenticates the credit request 

20 message 48 to reveal the amount of credit requested by 

the player 12. The amount of gambling credit 
requested is confirmed with the player 12. The 
wagering establishment 16 then decides whether or not 
to provide all or part of the gambling credit 

25 requested. If the credit request is denied, player 12 

is given an authenticatable reactivation message 50 
which is read and authenticated by gaming computer 14 
to enable player 12 to continue wagering with any 
available gambling credit balance. Alternatively, the 

30 player 12 has the option to cash-out any gambling 

winnings in accordance with the sequence depicted in 
FIG. 8 and described below. If the credit request is 
partially or fully granted, the process continues for 
the amount of gambling credit the wagering 

35 establishment 16 is willing to sell to the player 12. 

The host computer 3 0 generates an authenticatable new 
credit message 52 which is provided to player 12 for 
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the purposes of loading a pending amount of credit 
requested into the player's gaming computer 14 via the 
banking program 26 of the gambling software 22. The 
gaming computer 14 reads and authenticates the new 
5 credit message 52 and displays the exact amount of new 

credit added to player 12 's available gambling credit 
balance. The amount of new gambling credit is shown 
to player 12 as pending, but is not yet available for 
use. Banking program 2 6 then instructs authentication 

10 software 2 9 to generate an authenticatable credit 

pending message 54 which is based in part on the 
monetary value of the new credits pending. The player 
12 communicates this credit pending message 54 to the 
wagering establishment 16 where it is read and 

15 authenticated by the host computer 3 0 to positively 

and irrefutably verify that the specific amount of 
gambling credit requested was properly loaded into 
player 12 's banking program 26. The host computer 30 
then generates an authenticatable credit release 

20 message 56. This credit release message 56 is 

provided to the player 12, and then read and 
authenticated by the gaming computer 14 to release the 
amount of pending gambling credit in banking program 
26, The gaming computer generates an authenticatable 

25 credit release verification message 58 which the 

player 12 provides to the wagering establishment 16. 
The host computer 3 0 then reads and authenticates the 
. credit release verification message 58 and in turn 
generates an authenticatable program reactivation 

30 message 60. The reactivation message 58 is 

communicated to the player 12, and thereafter read and 
authenticated by the gaming computer 14 to enable the 
game program 24. Simultaneously or subsequently, the 
wagering establishment 16 charges the player 12 for 

35 the value of gambling credit purchased in a manner 

mutually agreed upon by the player and the wagering 
establishment 16. For example, a credit card may be 
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charged, a bank transfer authorized, or some other 
form of payment or delayed payment may be made to the 
casino in exchange for the credits purchased- If at 
any point during this process one or more of the 
5 various authenticatable messages do not match those 

expected by the respective authentication software 
and/ or hardware associated with the gaming computer 14 
and the host computer 30, the player 12 is denied 
access to the banking program and associated gambling 

10 credit, and the gaming software 22 in such cases is 

disabled until the dispute is resolved. In this 
manner, the correct generation and authentication of 
each of the various messages communicated between the 
gaming computer 14 and the host computer 3 0 

15 positively confirms the amount, value and authenticity 

of gambling credit obtained by or made available to 
the player 12. 

It will be appreciated that gambling credit can 
also be furnished to the player 12 in predetermined 

20 amounts and/or preinstalled on a dedicated gaming 

computer 14, e.g., a personal digital assistant, 
provided by the wagering establishment 16. 
Alternatively, the player 12 can obtain a disk or 
module 90 having a specified amount of authorized 

25 credit which is then "loaded" into the banking program 

26 associated with the gaming computer 14 to enable 
wagering to the extent of the available gambling 
credit balance. Alternatively, as shown in FIG. 1C, 
the player 12 can obtain gambling credit using his or 

30 her own credit card 93, either through oral or 

electronic communications with the wagering 
establishment 16, or via an electronic card-reader 
apparatus 91 connected to the credit card issuing bank 
95 in the conventional manner. 

35 Once the player 12 has obtained gambling credit, 

he or she may place wagers by selecting wagering 
elements within various wagering events in any one of 
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a plurality of games of chance offered by the game 
program 24 of gaming software 22. Each game provides 
opportunities for player 12 to place wagers on one or 
more various wagering elements within a given wagering 
5 event depending upon the rules applicable to that 

game. As an example, the casino game of roulette 
involves a series of wagering events based upon the 
outcome of a random number selected by a ball spun 
within a roulette wheel- Each spin of the wheel is a 

10 single wagering event. Within that event, the player 

12 may bet on many different wagering elements such as 
red and black colors, single numbers, groups of 
numbers and the like. All wagers for each event are 
placed prior to the spin of the wheel. 

15 FIG. 7A is a flowchart depicting the wagering 

sequence for games of chance created by the game 
program 24 which proceeds as follows. The player 12 
first makes the appropriate selections on the gaming 
computer 14 to enter the game program 24 of the gaming 

20 software 22, .and then chooses a particular game on 

which to wager. The player 12 can wager on one or 
more events within the game as described above. The 
game program 24 prompts the player 12 to confirm the 
placement of wagers made and the total amounts of 

25 wagers entered. Such wagers may be withdrawn or 

modified until such time as they are confirmed. 
Confirmation is typically made by having the player 12 
. enter a confirmation message 62 prior to closing of 
all bets. The confirmation message 62 is generated by 

30 the gaming software 24, and can be made different for 

every wager for security reasons. It can be a simple 
one or two digit alphanumeric message which is read 
and used by the game program 24 to confirm that each 
bet placed for any wagering event was, in fact, what 

35 was intended by the player 12 and not placed in error. 

The game program 2 4 can be set up such that the 
confirmation message 62 may be simplified further to 
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a single key stroke in certain highly repetitive games 
such as, for example, slots, or when the total value 
of all wagers falls below a certain predetermined 
level. After confirmation message 62 has been entered 
by player 12, the game program 24, in accordance with 
the rules of a given casino game, generates a specific 
outcome for a given wagerable event (e.g., cards are 
dealt, the wheel is spun, etc.). The game program 24 
determines the outcome of each wager placed (win, lose 
or draw) , calculates and then displays the proposed 
correct payoff for that wager on the gaming computer 
14. The player 12 has the option to type in a yes/no 
message to accept the payoff outcome of all wagers or 
to dispute any payoff which the player 12 believes to 
15 be incorrect in some fashion. Any dispute can be 

handled by suspending the wagering process and calling 
the wagering authority 16 to resolve the matter by 
telephone or by some other means of dispute 
resolution. Once the player 12 accepts the resolution 
20 of a given wagering event, the correct amount of 

gambling credit is added or subtracted from player 
12 's gambling credit balance by the banking program 
26. Player 12 can then begin the wagering process all 
over again on a subsequent wagering event, or choose 
25 to end the gambling session. At any time, the player 

12 may select a review mode in the game program 24, 
and can review the amount and resolution of each and 
every wager made by the player 12 and the results of 
such wagers in chronological order. At any time, the 
30 player 12 can choose to redeem or cash-out all or part 

of the balance of gambling credit stored in banking 
program 2 6 through a credit cash-out sequence. If 
desired, the game program 24 may contain special 
built-in instructions to place limitations on winnings 
35 at the discretion of the wagering establishment. It 

is also anticipated that such gaming software 22 could 
be embedded in another product, such as in a computer 
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or other software, to provide a premium application 
which enables the purchaser of unrelated products to 
win something as governed by such an embedded program 
(e.g., a cash prize awarded). 

FIGS. 7B-7C are flowcharts of wagering sequences 
for future public events of which , the outcome is 
uncertain, such as a lottery, in the off-line 
embodiment. With regard to the following discussion 
and appended claims with respect to lotteries, the 
wagering establishment will be hereinafter identified 
as a "lottery authority" for clarity. To participate 
in a lottery, the player 12 selects a particular 
lottery event, i.e., a drawing, generated by the game 
program 24 on which to wager. The gaming computer 14 
then generates a lottery "ticket" layout unique to the 
specific lottery and the player selects the desired 
wagering elements (i.e. , numbers) . 

There are two types of exemplary lotteries 
described herein, the first classified as an instant 
type analogous to common scratch-off tickets, and the 
second characterized as future or external events of 
which the outcome is uncertain, i.e., a drawing takes 
place. It will be appreciated by the persons skilled 
in the art that a remote gaming arrangement whereby 
the player 12 participates in a lottery can be 
classified as either: (1) a non-registration system 
(by which the player wagers independently of. the 
lottery authority 16 and where the wager need not be 
registered with the lottery authority since the gaming 
software 22 or some other software or device 
associated with the gaming computer 14 provides a 
means of time-stamping the wager) ; or (2) a 
registration system (by which the player 12 chooses 
the wagering elements on the remote gaming computer 
14, but then must contact the lottery authority 16 in 
order to "register" the wager) . In the case of 
instant lotteries, verification of the date/time of 
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the wager is not important, since, by definition, the 
essentially instantaneous output of the game program 
24 determines the outcome. On the other hand, in 
lotteries based upon future events, the date and time 
5 of the wager is critical in a non-registration 

embodiment. A non-registration embodiment is depicted 
in FIG. 7B, and the wagering sequence associated 
therewith proceeds in the following manner. The 
player 12 logs onto the lottery application in the 

10 gaming computer 14 with his or her unique personal 

identification message 204, which has been preassigned 
by the lottery authority 16 with whom the player 12 
has preregistered. In this regard, an external 
authentication apparatus such as an 

15 encryption/decryption device 82, depicted in FIG. 2 

and described in more detail below, can be used to 
prevent minors from accessing the lottery program. 
Such a device can also employ, for additional 
verification, biometrics such as fingerprint, 

20 voiceprint or retinal-print recognition hardware 

and/or software. The player 12 then selects a 
specific lottery to play (e.g., Lotto), and selects 
the desired wagering elements 206 in a conventional 
manner, which choice (s) may be confirmed upon the 

25 player receiving a suitable prompt. The gaming 

computer 14 then generates an authenticatable ticket 
message 208 representing the selected wagering 
elements 206, and uses a hardened, tamper-proof or 
tamper-resistant clock to generate an authenticatable 

30 date/time message 210. This ticket message 208 may 

include a personal identification message 204 and/or 
software identification message 212. The ticket 
message 2 08 is stored in the gaming computer 14 and 
can be read and authenticated only by the host 

35 computer 30 associated with the lottery authority for 

verification. If desired, a physical "ticket" 

representing the player's choice of wagering elements 
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as embodied in the authenticatable ticket message 2 08 
can be printed out by conventional printing means 
associated with the gaming computer 14. This procedure 
may be repeated as many times as necessary to 
5 participate in multiple lottery events or to chose 

wagering elements for a single event. Such an 
arrangement allows wagering to take place independent 
from the lottery authority 16. The authenticatable 
date/time message 210 ensures that the player 12 

10 cannot tamper with the wager "after the fact", i.e., 

after the drawing, the player cannot modify the 
numbers selected to produce a "winning ticket." To 
cash-out, the player 12 provides the authenticatable 
ticket message 208 to the lottery authority 16 and the 

15 host computer 3 0 reads and authenticates the ticket 

message 208 to reveal the selected wagering elements 
and the date/time of the wager. Winnings are then 
awarded in a conventional manner. It is anticipated 
that large payoffs will require that the player 12 

20 physically return the gaming computer 14, if provided 

thereby, or any detachable data memory media, to the 
lottery authority 16 to enable inspection for any 
indication of tampering. 

FIG. 7C depicts a registration sequence whereby 

25 the player 12 registers his or her lottery choice (s) 

with the lottery authority 16 prior to a lottery 
drawing. When the player 12 is ready to do so, the 
• lottery authority 16 is called through a public 
telephone network. The player 12 then enters his or 

30 her unique PIN message 204, either by pressing the 

appropriate keys on the telephone pad, on the gaming 
computer 14 (if these are placed on-line in either a 
temporary or permanent connection) , or by speaking the 
selections through the telephone for acquisition by a 

35 voice recognition program of the type known in the 

art. For additional verification, the player 12 can 
be asked to enter a computer or software 
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10 



15 



identification message 212. The lottery authority 16 
then requests that the player 12 choose from a menu of 
lotteries which are still open for wagering, make the 
desired selection (s) , and indicate the method of 
payment. In certain applications, gambling credit can 
be preinstalled on the gaming computer 14 or module 
90, as described above, in which case such credit can 
be included and represented in the authenticatable 
ticket message 208. Normally, the ticket-message 208 
need not be authenticatable in a registration 
embodiment (i.e., it merely represents the choice of 
wagering elements) . If the ticket message is 

authenticatable, it is then read and authenticated 
with a means known only to the lottery authority 16. 
This ensures and verifies that a valid lottery 
selection and sufficient credit were entered. The 
lottery authority 16 may confirm the transaction by 
reading back the wagering elements embodied in the 
message. After the lottery authority 16 accepts the 
20 ticket message 208, it generates a registration 

message 218 (authenticatable or non-authenticatable) 
which embodies the ticket message 208 and a current 
authenticatable date/time message 220, i.e., a 
"timestamp". The registration message 218 can be 
25 provided to the player 12 and is stored by the lottery 

authority 16 in the host computer 3 0 for future 
reference. The lottery authority 16 can then prompt 
the player to confirm the wager by entering a simple 
yes/no response. If desired, the lottery authority 16 
3 0 can impose a limit on the number of wagers per player 

or per given time period and reject wagers exceeding 
set amounts. Optionally, the player 12 may obtain 
printed ticket receipts which include the registration 
message 218 from the gaming computer 14. The wagering 
35 process may be repeated for each "ticket" registered. 

When he or she is finished, the player 12 simply hangs 
up or terminates the connection with the lottery 
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authority 16. After the lottery drawing or process, 
the lottery authority 16 compares any winning numbers 
against all registered tickets in accordance with 
conventional practice. If the prize is below a 
5 specific threshold (e.g., $100), then such prize can 

be credited to the player's account or credit card, 
or, if above a certain threshold, payouts can be made 
in a conventional manner. 

In general, there are several ways by which the 

10 player 12 can cash-out winnings when such winnings are 

embodied or stored in the gaming computer 14. FIG. 8A 
is a flowchart diagram of the credit cash-out sequence 
in a first off-line embodiment. Player 12 first goes 
through the handshake sequence depicted in FIG. 5 and 

15 described above. Once player 12 's identity is 

confirmed, the wagering establishment 16 provides the 
player 12 with an authenticatable banking activation 
message 64 . The player 12 then activates banking 
program 26 and enters the banking activation message 

20 64, which is read and authenticated by the gaming 

computer 14 to access the banking 
purchasing/redemption function. Player 12 then enters 
the amount of gambling credit he or she wants to 
cash-out into banking program 26. The amount to be 

25 cashed-out is placed by the banking program 26 into a 

cash-out pending field. The player's banking program 
26 then generates an authenticatable credit cash-out 
.message 66 which the player 12 provides to wagering 
establishment 16. The host computer 3 0 reads and 

30 authenticates the credit cash-out message 66 to reveal 

the amount of credit that the player 12 is requesting 
be cashed out, which amount is confirmed to the player 
12 by wagering establishment 16. The host computer 30 
then generates an authenticatable cash-out 

35 acknowledgment message 68 and provides this message to 

the player 12. Player 12 enters the cash-out 
acknowledgment message 68 into gaming computer 14 
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which reads and authenticates the same, and banking 
program 26 then deducts the amount of gambling credit 
to be cashed-out of the player's available gambling 
credit balance. Banking program 26 then generates an 
5 authenticatable deduction verification message 7 0 

which indicates that the correct amount was deducted 
from the player's account. This message is provided 
to the wagering establishment 16 and read and 
authenticated by the host computer 30. The host 

10 computer thereafter generates an authenticatable 

program reactivation message 72 which is provided to 
the player 12 for entry into the gaming computer 14 to 
enable the game program 24 to permit continued 
gambling with any available gambling credit. . The 

15 wagering establishment 16 then issues payment to the 

player 12 for the amount of gambling credit cashed- 
out, in the form of a credit to the player's credit 
card, a banking wire or some other mutually 
agreed-upon method of payment. It is also 

20 contemplated .that where the player 12 has been 

provided with a dedicated gaming computer 14 (e.g., a 
hand-held device) gambling credit may be cashed-out by 
simply bringing the gaming computer 14 to the wagering 
establishment 16 (or its agent) , where either the 

25 entire device or a credit module associated therewith 

is physically returned to facilitate inspection of the 
apparatus to determine whether any attempts have been 
made to tamper with or modify the unit or the 
software. 

30 FIGS. 9-12 contain flowcharts of an on-line 

embodiment schematically depicted in FIG. 2, whereby 
gaming computer 14 communicates directly through a 
public telephone network or like communications link 
29, such as via a modem, with the host computer 30. 

35 The host computer 30 includes gaming software 74 

comprised of a game program 76, banking program 77, 
audit program 78 and authenticatable message read, 
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authenticate and generate software 79. To prevent 
unauthorized access, an external authentication device 
such as the encryption/decryption device 82 shown 
schematically in FIG. 2, is used by the player 12 to 
5 generate a unique alphanumeric identification message 

8 3 to provide a secure log-on message to obtain 
access to host computer 30 to participate in on-line 
gambling and/or purchase and redeem gambling credit. 
In one embodiment , device 82, which looks like a 

10 credit-card calculator, includes a display 84, an 

integral keyboard 86 and internal 
encryption/decryption hardware and/or software. Such 
a device is currently used for making wireless money 
transfers, for example /by Fleet Bank. Messages input 

15 and output to and from device 82 could be embodied in 

specific sounds identified through a dedicated sound 
recognition program which are transmitted to and 
received from computer 30. The encryption/decryption 
device 82 is used to generate an authenticatable 

20 log-on message 83 by encrypting player 12 's personal 

identification message 32 with a separate verification 
message 88 provided to player 12 by computer 30. 
Alternatively, verification message 88 can be "built 
into" encryption/decryption device 82, such as stored 

25 in a ROM chip. Thus, knowledge of the player 12' s 

personal identification message 32, in and of itself, 
is insufficient to enable an unauthorized third party 
.such as a minor or known compulsive gambler to obtain 
access to gambling or to purchase and/or cash-out 

30 gambling credit. The gaming software 3 3 in the host 

computer 30 can contain appropriate instructions to, 
in such a case, terminate the on-line connection and 
prevent further attempts to gain access with that 
particular personal identification message 32. 

3 5 Moreover, the device 82 can have the banking program 

2 6 associated therewith in order to store gambling 
credit independent of the gaming computer 14, in which 
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case the exchange of messages between the device 8 2 
and the gaming computer 14 would represent the actual 
"money". In this manner, gambling credit can be 
embodied in an apparatus which is structurally 
5 independent from the gaming computer 14. 

FIG. 9 is a flowchart of the registration and 
start-up sequence. Initially, the player 12 through 
gaming computer 14, dials up and connects through the 
public telephone network 29 to the host computer 30. 

10 Player 12 then enters the requested registration 

information and is assigned a unique personal 
identification message 32. The player 12 then logs-on 
as described above. If player 12/ s identity is 
confirmed, the host computer 3 0 then permits wagering 

15 to the extent of any available gambling credit, and 

credit purchase and/or redemption. 

As shown in FIG. 10, the purchase credit sequence 
in the on-line embodiment is comprised of the 
following series of exchanges between the gaming 

2 0 computer 14 and the host computer 30. The host 

computer 30 first generates a message which queries 
the player as to how much gambling credit is desired 
for the particular gambling session. The player 12 
responds at the prompt with the amount of wagering 

25 credit requested. The wagering establishment 16 then 

obtains authorization for the requested amount through 
agreed upon methods of credit such as a credit card or 
the like. The approved credit amount is then 
deposited into player 12 's wagering credit account in 

30 banking program 77. At this point, the player 12 can 

proceed to wager on a plurality of games offered by 
the wagering establishment 16. In this connection, 
player 12 may at the end of each session, request an 
authenticatable message number that verifies the 

35 amount of credit he or she has available from the 

wagering establishment 16 at that time for purposes of 
any future dispute resolution. 
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FIG. 11 is a flowchart of the gambling sequence in 
the on-line embodiment. The player 12 first activates 
gaming computer 14, establishes electronic 
communications with the wagering establishment 
5 computer 3 0 through the public telephone network 29, 

and proceeds with the secure log-on procedure 
described above. The gaming' computer 14 then 
registers a gambling session message* 80 with the host 
computer 30, which, in turn, makes available to the 
10 player 12 for wagering a choice of games of chance, 

skill or future public events where the outcome is 
uncertain. 

FIG. 12 is a flowchart of the credit cash-out 
sequence in the on-line embodiment. The player 12 

15 first requests to cash-out all or part of the credit 

balance in the wagering credit account maintained on 
host computer 30. The wagering establishment 16 then 
requests confirmation of the amount of credit to be 
cashed-out. The player 12 then keys in his or her 

20 unique personal identification message 32 to reconfirm 

that amount. This amount is then deducted from the 
player 12 's credit account and the wagering 
establishment 16 then authorizes a credit to be made 
to the player's preassigned credit card, or makes some 

25 other agreed-upon method of payment. For additional 

verification, the encryption/decryption device 82 can 
be used to provide a verification message to the 
.wagering establishment 16 prior to cashing-out. 
Moreover, the wagering establishment 16 can be 

30 provided with a special telephone number to call-back 

the player 12 to confirm the cash-out which can only 
then occur when the player 12 calls the wagering 
establishment 16 back from that number, to provide an 
additional measure of security. 

35 Alternatively, in another on-line embodiment, the 

gaming computer 14 includes gaming software 22 as in 
the first embodiment of FIG. 1, but is on-line with 
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the host computer 3 0 and, through the public telephone 
network 29, the host computer 3 0 may or may not serve 
to regulate or control the gaming software simulation 
of casino games on the gaming computer 14. For 
5 example, the host computer 3 0 can directly keep a 

record of all or selected activities taking place on 
the gaming computer 14 for the purpose of additional 
verification or security. Alternatively, the 

electronic link can be of a control nature to vary the 

10 odds of a given wager based upon any of a variety of 

factors such as gambling duration or other factors 
such as a progressively increasing jackpot (e.g., in 
a slot machine simulation) . 

In the off-line embodiment, at all times, an 

15 audit-trail of all transactions can be recorded on 

data storage media associated with the host computer 
30, and optionally, in gaming computer 14 to be 
ultimately downloaded to or accessed by the wagering 
establishment 16. Such an audit-trail can also be 

20 recorded in the tamper-resistant or tamper-evident 

read/write data storage media device 28 provided by 
the wagering establishment 16 to player 12 in the 
embodiment shown in FIG. 3. 

The present invention has been shown and described 

25 in what are considered to be the most practical and 

preferred embodiments. It is anticipated, however, 
that departures may be made therefrom and that obvious 
modifications will occur to persons skilled in the 
art. 
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CLAIMS 

We Claim: 

1. A gaining system, comprising: 

a host computer which enables a player at a 
remote location to purchase and redeem gambling credit 
and which generates at least one authenticatable 
message to be provided from said host computer and 
which reads and authenticates at least one 
authenticatable message to be provided to said host 
computer; 

an off-line gaming computer remotely disposed 
from said host computer on which the player wagers on 
at least one wagering opportunity, said gaming 
computer for generating at least one wagering 
opportunity and enabling the purchasing, storing and 
redeeming of gambling credit, said gaming computer 
further generating said at least one authenticatable 
message to be provided to said host computer and which 
reads and authenticates said at least one 
authenticatable message to be provided from said host 
computer, wherein said authenticatable messages 
exchanged between said host computer and said gaming 
computer enable the player to at least one of purchase 
and redeem gambling credit. 

2. The gaming system recited in Claim 1, wherein 
said gaming computer includes gaming software for 
generating said at least one wagering opportunity and 
.enabling said purchasing, storing and redeeming of 
gambling credit, provided on data storage media. 

3. The gaming system recited in Claim 1, wherein 
said gaming computer communicates with data memory 
media disposed within a tamper-proof read/write 
apparatus. 

4. The gaming system recited in Claim 2, wherein 
said gaming computer reads the unique magnetic 
characteristics of said data storage media for the 
purpose of creating a unique authenticatable message 
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to thereby prevent undetectable duplication of data 
stored on said data storage media. 

5. The gaming system recited in Claim 1, wherein 
said gaming computer includes at least one of 
tamper-resistant and tamper-evident data storage media 
for recording said authenticatable messages provided 
to and from said gaming computer to generate an audit 
trail. 

6. The remote gaming system recited in Claim 1, 
wherein said host computer records and stores said 
messages provided to and from said host computer to 
generate an audit-trail. 

7. The remote gaming system recited in Claim 1, 
wherein said gaming computer is provided with a 
predetermined amount of casino credit embodied in at 
least one of data storage media permanently installed 
on said gaming computer and data storage media 
removably installed on said gaming computer. 

8. The remote gaming system recited in Claim 1, 
wherein said gaming computer includes at least one of 
voice recognition means for identifying the unique 
voice characteristics of the player and fingerprint 
identification means for identifying the unique 
fingerprint of the player. 

9. The remote gaming system recited in Claim 1, 
wherein said wagering opportunity is a game of skill. 

10. A gaming system, comprising: 

a host computer which enables a player 
networked at a remote location to purchase and redeem 
gambling credit and wager on at least one wagering 
opportunity, said host computer generating at least 
one authenticatable message to be communicated from 
said host computer and reading and authenticating at 
least one authenticatable message communicated to 
said host computer; 

a gaming computer on which the player wagers 
on said at least one wagering opportunity where said 
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gaming computer is remotely disposed from said host 
computer; and 

means for generating at least one 
authenticatable message for communication to and 
reading and authentication by said host computer to 
enable the player to access said host computer from 
said gaming computer. 

11. The remote gaming system recited in Claim 10, 
wherein said means for generating said at least one 
authenticatable message is embodied in an apparatus 
which is structurally independent of said gaming 
computer. 

12. A gaming computer for use in a gaming system 
for wagering against a wagering establishment; 

said gaming computer for generating at least 
one wagering opportunity and enabling a player at a 
remote location from said wagering establishment to 
wager on and accumulate any winnings from said at 
least one wagering opportunity with gambling credit 
from said wagering establishment, said gaming computer 
having gambling credit pre-installed in said gaming 
computer by at least one of said wagering 
establishment and an authorized agent of said wagering 
establishment, said at least one wagering opportunity 
and gambling credit being enabled by software residing 
in at least one of tamper-resistant and tamper-evident 
memory means. 

13. The gaming computer recited in Claim 12, 
wherein a predetermined amount of said credit is 
pre-installed in said gaming computer by said wagering 
establishment . 

14. The gaming computer recited in Claim 12, 
wherein said credit is redeemed from said wagering 
establishment by providing said wagering establishment 
with said gaming computer, and said wagering 
establishment utilizes secure means for checking said 
gaming computer hardware and software to reveal at 
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least one of any fraud and tampering. 

15. The gaming computer recited in Claim 12, 
wherein said credit is stored on detachable and at 
least one of tamper-resistant and tamper-evident data 

5 memory media which interface with said gaming computer 

and where said data memory media are provided to said 
wagering establishment for credit redemption. 

16. A gaming method by which a player gambles on 
a gaming computer against a wagering establishment 

10 where no on-line connection exists between the gaming 

computer and the wagering establishment, comprising 

the steps of: 

(A) purchasing gambling credit from said 
wagering establishment and at least one of loading and 

15 preloading said gambling credit into said gaming 

computer; 

(B) generating at least one wagering 
opportunity on said gaming computer; 

(C) proceeding to wager on said at least one 
20 wagering opportunity presented on said gaming 

computer ; 

(D) accumulating wagering credits or debits on 
said gaming computer as a result of the outcome of 
said at least one wagering opportunity; and 

25 (E) redeeming gambling credit from said 

wagering establishment by communicating at least one 
authenticatable message provided from said wagering 
establishment to said gaming computer which reads and 
authenticates said at least one authenticatable 

3 0 message, and communicating at least one 

authenticatable message to said wagering 

establishment, where at least one of said 
authenticatable messages is read and authenticated by 
said wagering establishment. 

35 17, A gaming method by which a player having a 

personal identification message gambles against a 
wagering establishment on a gaming computer which 
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presents a computer generated wagering opportunity, 
where the gaming computer is at a remote location and 
networked to a host computer associated with the 
gaming establishment, comprising the steps of: 

(A) establishing a secure on-line link between 
said gaming computer and said host computer by 
generating an authenticatable message embodying an 
identification message known only to the player and 
the wagering establishment and a separate message, 
said host computer then authenticating said 
authenticatable message for verification; 

(B) purchasing gambling credit from said 
wagering establishment; 

(C) generating at least one wagering 
opportunity on said gaming computer; 

(D) proceeding to wager on said at least one 
wagering opportunity presented on said gaming * 
computer ; 

(E) accumulating at least one of wagering 
credits band debits as a result of the outcome of said 
at least one wagering opportunity; and 

(F) redeeming gambling credit from said 
wagering establishment . 

18. The method recited in Claim 17, wherein Step 
(F) further comprises generating an authenticatable 
message on said gaming computer embodying an 
identification message known only to the player and 

.the wagering establishment, said message to be 
communicated to, read and authenticated by said host 
computer for verification prior to redeeming said 
gambling credit. 

19. The method recited in Claim 17, wherein said 
authenticatable message is authenticatable and 
generated by an encryption/decryption apparatus which 
is structurally independent of said gaming computer. 

20. The method recited in Claim 17, wherein said 
gambling credit is embodied in an 
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encryption/decryption apparatus which is structurally 
independent of said gaining computer • 

21. A gaming system which enables a player at a 
remote location to wager against^ a wagering 
5 establishment, wherein the player wagers on a gaming 

computer where said gaming computer generates at least 
one wagering opportunity and enables the player to at 
least one of purchase gambling credit and redeem 
gambling winnings. 

10 22. The gaming system recited in Claim 21, 

wherein said purchased pre-installed credit is 
embodied in a tamper-proof plug-in module, provided by 
the wagering establishment and interfaced with said 
gaming computer. 

15 23. The gaming system recited in Claim 32, 

wherein said gambling winnings are electronically 
stored on at least one of a tamper-resistant and 
tamper-evident plug-in module provided by the wagering 
establishment and interfaced with said gaming 

2 0 computer. 

24. The gaming system recited in Claim 21, 
wherein said gaming computer includes gaming software 
for generating said at least one wagering opportunity, 
and said gaming software resides on a tamper-proof 

25 chip disposed in an inspectable casing. 

25. The gaming system recited in Claim 21, 
wherein said gaming computer includes gaming software 
for generating said at least one wagering opportunity 
which includes a random distribution of messages known 

3 0 only to the wagering establishment to prevent 

unauthorized tampering with said gaming software. 

26. The gaming system recited in Claim 21, 
wherein said gaming computer includes gaming software 
for generating said at least one wagering opportunity, 

3 5 and means for receiving external keys input to said 

gaming software, said keys being used by said gaming 
software to function and which disable said gaming 
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program if said gaming software has been tampered 
with. 

27. The gaming system recited in Claim 21, 
wherein said gaming computer includes gaming software 
for generating said at least one wagering opportunity 
upon receiving data from a source external to said 
gaming computer. 

28. A gaming system which enables a player at a 
remote location to participate in a lottery by 
choosing a selection of wagering elements in a lottery 
on a gaming computer, where said selection of wagering 
elements is combined with at least one of an 
authenticatable date/time message, player's 
identification message, and computer/software 
identification message, into an authenticatable 
message representing the player's selection to be read 
and authenticated by a lottery authority for 
registration. 

29. The gaming system recited in Claim 28, 
wherein said selection is combined, with at least one 
of a date/time stamp, player's identification message, 
and computer/software identification message, into a 
compressed ticket-message to be reads and 
authenticates by a lottery authority for registration. 

30. The gaming system recited in Claim 28, 
wherein said selection is date/time stamped to form an 
encrypted ticket message for decryption by a lottery 
authority to reveal a valid wager. 

31. A method by which a player participates in a 
lottery offered by a lottery authority, comprising the 
steps of: 

(A) choosing wagering elements for a given 
lottery event on a gaming computer; 

(B) generating an authenticatable message on 
said gaming computer which embodies the choice of said 
wagering elements and at least one of an 
authenticatable date/time message player's 
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identification message, computer identification 
message, and software identification message; 

(C) registering the wager with the lottery 
authority by communicating said authenticatable 

5 message to the lottery authority, where said lottery 

.authority has a host computer which reads and 
authenticates said authenticatable message to reveal 
the player's valid choice of wagering elements; and 

(D) confirming the wager by generating an 
10 authenticatable registration message on said host 

computer by combining said authenticatable message 
with an authenticatable date/time message using a 
means known only to the lottery authority. 

32. A gaming computer for use in a gaming system 

15 for wagering against a wagering establishment, said 

gaming computer for generating at least one wagering 
opportunity and enabling a player at a remote location* 
to wager on and accumulate any winnings from said at 
least one wagering opportunity with purchased gambling 

20 credit embodied in at least one of a tamper-resistant 

and tamper-evident module provided to said player by 
said wagering establishment. 

3-3. A gaming computer for use in a gaming system 
for wagering against a wagering establishment, said 

25 gaming computer having gaming software for generating 

at least one wagering opportunity and enabling a 
player at a remote location to wager on and accumulate 
any winnings from said at least one wagering 
opportunity with purchased gambling credit, said 

30 gaming software residing on at least one of tamper- 

resistant and tamper-evident data storage media 
disposed in an inspectable casing. 

34. A gaming computer for use in a gaming system 
for wagering against a wagering establishment, said 

35 gaming computer having gaming software for generating 

at least one wagering opportunity and enabling a 
player at a remote location to wager on and accumulate 
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any winnings from said at least one wagering 
opportunity with purchased gambling credit, said 
gaming software including a random distribution of 
messages known only to the wagering establishment to 
5 enable the wagering establishment to check said 

distribution of messages to reveal unauthorized 
tampering with said gaming software. 

3 5. A gaming computer for use in a gaming system 
for wagering against a wagering establishment, said 

10 gaming computer having gaming software for generating 

at least one wagering opportunity and enabling a 
player at a remote location to wager on and accumulate 
any winnings from said at least one wagering 
opportunity with purchased gambling credit, said 

15 gaming computer further including means for receiving 

external keys for input to said gaming software to 
enable said gaming software and disable said gaming • 
software if said gaming software has been tampered 
with. 

20 36. A gaming computer for use in a gaming system 

for wagering against a wagering establishment, said 
gaming computer having gaming software for generating 
at least one wagering opportunity and enabling a 
player at a remote location to wager on and accumulate 

25 any winnings from said at least one wagering 

opportunity with purchased gambling credit, said 
gaming software further including means for receiving 
.data from a source external to said gaming computer to 
enable said gaming software. 

30 37. The gaming system recited in Claim 1, 

wherein said authenticatable messages are encrypted 
with an encryption key known only to said wagering 
establishment for decryption by at least one of said 
host computer and said gaming computer. 

35 38. The gaming system recited in Claim 10, 

wherein said authenticatable messages are encrypted 
with an encryption key known only to said wagering 
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establishment for decryption by at least one of said 
host computer and said gaming computer. 

39. The gaming system recited in Claim 17, 
wherein said authenticatable messages are encrypted 
with an encryption key known only to said wagering 
establishment for decryption by at least one of said 
host computer and said gaming computer. 
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STARTUP AND REGISTRATION SEQUENCE 



FIG. 4 



PLAYER 12 REGISTERS WITH 
WAGERING EST. 16 



PLAYER 12 IS ASSIGNED 
PERSONAL ID MESSAGE 32 



WAGERING EST. 16 
PROVIDES GAMING SOFT- 
WARE 22 INCLUDING 

1. GAME PROGRAM 24 

2. BANKING PROGRAM 26 

3. AUDIT PROGRAM 27 
AND A PERSONAL ID 
MESSAGE 34 



PLAYER LOADS GAMING 
SOFTWARE 22 INTO GAMING 
COMPUTER 14 



PLAYER 12 CALLS WAGERING 
EST. 16 TO RECEIVE START 
UP ID MESSAGE 33 



PLAYER 12 ENABLES GAM- 
ING COMPUTER 14 AND RUNS 
GAMING SOFTWARE 22 
CONTANING GAME PROGRAM 
24, BANKING PROGRAM 26 
AND AUDIT PROGRAM 27 



PRACTICE 
GAMES 




YES 



GAMBLING 
SEQUENCE 



PURCHASE 

CREDIT 

SEQUENCE 
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HANDSHAKE RECOGNITION SEQUENCE 



PLAYER 12 CALLS 
WAGERING EST. 16 



PLAYER 12 COM- 
MUNICATES : 

1. PERSONAL ID 32 

2. SOFTWARE ID 34 
TO WAGERING EST. 
16 



HOST COMPUTER 30 
GENERATES AND 
WAGERING EST. 16 
PROVIDES HANDSHAKE 
MESSAGE 42 TO PLAYER 
12 



PLAYER 12 ENTERS 
HANDSHAKE MESSAGE 
42 INTO GAMING COM- 
PUTER 14 



GAMING SOFTWARE 22 
GENERATES AUTHENT- 
ICATABLE RECOGNITION 
RESPONSE MESSAGE 44 



PLAYER 12 COMMUNICATES 
RECOGNITION RESPONCE 
MESSAGE 44 TO WAGERING 
EST. 16 FOR AUTHENTICAT- 
ION 



HOST COMPUTER 30 READS 
AND AUTHENTICATES REC- 
OGNITION RESPONCE 
MESSAGE 44 TO VERIFY 
PLAYER 12*S IDENTITY AND 
SOFTWARE IDENTITY 



VERIFIED PLAYER 12 THEN 
PROCEEDS WITH APPRO- 
PRIATE WAGERING EST.16 
INTERACTION 



FIG. 5 
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PURCHASE CREDIT SEQUENCE - OFF - LINE EMBODIMENT 



FIG. 6-1 



PLAYER 12 CALLS WAGERING 
EST. 16 AND ESTABLISHES 
ID HANDSHAKE SEQUENCE 



WAGERING EST. 16 PROVIDES 
BANKING PROGRAM ACTIVIA- 

TION MESSAGE 46 TO PLAYER 
12 



I 



PLAYER 12 ACTIVATES 
BANKING PROGRAM 26 
( GAMING PROGRAM 24 

IS DISABLED ) ON GAMING 
COMPUTER 14 



I 



PLAYER 12 ENTERS AMOUNT 
OF CREDIT REQUESTED INTO 
BANKING PROGRAM 26 



BANKING PROGRAM 26 
GENERATES AN AUTHENTIC- 
ATABLE CREDIT REQUEST 
MESSAGE 48 TO WAGERING 
EST. 16 



PLAYER 12 COMMUNICATES 
CREDIT REQUEST MESSAGE 
48 TO WAGERING EST. 1 6 



HOST COMPUTER 30 READS 
AND AUTHENTICATES 
CREDIT REQUEST MESSAGE 
48 TO REVEAL AMOUNT OF 
CREDIT REQUEST 



WAGERING EST. 16 COMM- 
UNICATES AMOUNT OF 
CREDIT REQUEST TO PLAY- 
ER 12 FOR CONFIRMATION 




AUTHENTICATABLE 
REACTIVATION . 
MESSAGE 50 IS PRO- 
VIDED TO PLAYER 12 



IS 

CREDIT 
REQUEST 
PARTIALLY 
.GRANTED. 

7 



YES 



CREDIT 

REQ. 

DENIED 



TO FIG. 6 ( CONTINUED - 2 ) 
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FROM FIG. 6-1 



HOST COMPUTER 30 GEN- 
ERATES AUTHENTICATABLE 
NEW CREDIT MESSAGE 52 
REPRESENTING AMOUNT 
OF CREDIT TO BE GRANTED 



PLAYER 12 ENTERS NEW 
CREDIT MESSAGE 52 INTO 
GAMING COMPUTER 14 



GAMING COMPUTER 14 
READS AND AUTHENTICATES 
NEW CREDIT MESSAGE 52 
AND DISPLAYS AMOUNT OF 
CREDIT PENDING 



GAMING COMPUTER 14 
GENERATES 

AUTHENTICATABLE CREDIT 
PENDING MESSAGE 54 



I 



PLAYER 12 COMMUNICATES 
CREDIT PENDING MESSAGE 
54 TO WAGERING EST. 16 



HOST COMPUTER 30 READS 
AND AUTHENTICATES 
CREDIT PENDING MESSAGE 
54 



HOST COMPUTER 30 GEN- 
ERATES AUTHENTICATABLE 
CREDIT RELEASE MESSAGE 
56 



T 



I 

WAGERING EST. 16 COMM- 
UNICATES CREDIT RELEASE 
MESSAGE 56 TO PLAYER 12 



PLAYER 12 ENTERS CREDIT 
RELEASE MESSAGE 56 INTO 
GAMING COMPUTER 14 



GAMING COMPUTER 14 
READS AND AUTHENTICATES 
RELEASE MESSAGE 56 AND 
DISPLAYS NEW CREDIT 
BALANCE 



GAMING COMPUTER 14, 
GENERATES AUTHENTICAT- 
ABLE CREDIT RELEASE 
VERIFICATION MESSAGE 58 



PLAYER 12 COMMUNICATES 
CREDIT RELEASE VERIFI- 
CATION MESSAGE 58 TO 
WAGERING EST. 16 



HOST COMPUTER 30 READS 
AND AUTHENTICATES 
CREDIT RELEASE VERIFI- 
CATION MESSAGE 58 AND 
GENERATES AN AUTHENT- 
ICATABLE PROGRAM 
REACTIVATION MESSAGE 
60 



J 

FIG. 6-2. 



( CONTINUED - 3 ) 
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FIG. 6-3 



FROM FIG. 6-2 



WAGERING EST. 16 
CHARGES PLAYER 12 FOR 
VALUE OF GAMBLING 
CREDIT PURCHESED 



WAGERING EST. 16 
PROVIDES PLAYER 12 
WITH AUTHENTICATABLE 
PROGRAM REACTIVATION 
MESSAGE 60 



GAMING COMPUTER 14 
READS AND AUTHENTICATES 
PROGRAM REACTIVATION 
MESSAGE 60 



GAME PROGRAM 24 IS 
REACTIVATED FOR USE BY 
PLAYER 12 
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WAGERING SEQUENCE ( OFF-LINE ) 

FIG. 7 A 



PLAYER 12 ENTERS 
GAME PROGRAM 27 






PLAYER 12 ; 
CHOOSES GAME 







PLAYER 12 WAGERS 
ON ONE OR MORE 
EVENTS WITHIN A 
GAME 



PROGRAM 24 
PROMPTS PLAYER 
12 TO ENTER 
CONFIRMATION 
CODE 62 



PLAYER 12 ENTERS 
CONFIRMATION 
CODE 62 



GAME PROGRAM 
24 GENERATES 
A SPECIFIC OUT- 
COME FOR A 
GIVEN WAGERABLE 
EVENT 



GAME PROGRAM 
24 CALCULATES 
AND DISPLAYS 
RESULT OF EACH 
WAGER AND 
PROPOSED CORRECT 
PAY-OFF 



TO FIG. 7A 
( CONTINUED ) 
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FROM FIG. 7A 



PLAYER 12 ENTERS 
YES /NO TO ACCEPT 
OR DISPUTE THE 
PAY OFF 



FIG. 7A 



( CONTINUED ) 




NO 


DISPUTE 




RESOLUTION 



CORRECT AMOUNT OF 
GAMBLING CREDIT IS 
ADDED OR SUBTRACTED 
TO PLAYER'S GAMBLING 
CREDIT BALANCE IN 
BANKING FILE IN BANK- 
ING PROGRAM 26 





NO 



YES 



1 




CASH - OUT 



PLAY AGAIN 



CONTINUE 
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WAGERING SEQUENCE ( OFF-LINE ) NON-REGISTERE D LOTTERY 

FIG. 7B-1 



PLAYER 12 ACTIVATES GAMING COMPUTER 
14 AND LOGS ON WITH A PERSONAL 
IDENTIFICATION MESSAGE 204 WHICH HAS 
BEEN ASSIGNED BY THE LOTTERY 
AUTHORITY 16 WITH WHOM THE PLAYER 
12 HAS PREREGISTERED 



PLAYER 12 SELECTS A SPECIFIC 
LOTTERY TO PLAY ( e.g. LOTTO ) 



LOTTERY TICKET LAYOUT UNIQUE FOR 
THAT SPECIFIC LOTTERY IS 
GENERATED BY GAME PROGRAM 24 
AND DISPLAYED ON THE SCREEN 
OF THE GAMING COMPUTER 14 



PLAYER 12 FILLS OUT THE TICKET BY 
M PICKING " THE DESIRED WAGERING 
ELEMENTS ( NUMBERS) 206 



PLAYER PRESSES A KEY TO CONFIRM THAT 
THE NUMBERS PICKED ARE CORRECT - 
CHANGES ARE MADE IF NEEDED 



TO FIG. 7B-2 
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FIG. 7B-2 

FROM FIG. 7B-1 



PROGRAM CREATES A COMPRESSED 
MULTI-DIGIT AUTHENTICATABLE TICKET 
MESSAGE 208 BY COMBINING THE 
NUMBERS SELECTED 206 WITH AN 
UNFORGEABLE AUTHENTICATED 
DATE / TIME MESSAGE 210, AND 
OPTIONALY THE PLAYER'S IDENTIFI- 
CATION CODE 204 AND AN INTERNAL 
COMPUTER OR SOFTWARE ID CODE 
212 



THE AUTHENTICATABLE TICKET 
MESSAGE 208 IS STORED IN A FILE 
OF THE GAME PROGRAM 24 OF 
GAMING COMPUTER 14 



( OPTIONAL ) THE PLAYER 12 MAY 
PRINT OUT THE TICKET WITH THE 
NUMBERS PICKED FOR USE AS A 
PHYSICAL COPY-THE PRINTOUT SHOWS 
THE NUMBERS CHOSEN 206 AND THE 
AUTHENTICATABLE TICKET MESSAGE 
208 



i 

1 

PLAYER REPEATS THIS PROCESS AS 
MANY TIMES AS DESIRED, ONCE FOR 
EACH "TICKET" 
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WAGERING SEQUENCE ( OFF-LINE ) REGISTERED LOTTERY 



FIG. 7C-1 



WHEN PLAYER 12 IS READY TO PURCHASE 
AND REGISTER THE TICKET(S), THE 
PLAYER 12 COMMUNICATES WITH THE 
LOTTERY AUTHORITY 16 



THE LOTTERY AUTHORITY 16 UTILIZES 
A PUBLIC TELEPHONE NETWORK 40 WITH 
INTERACTIVE VOICE CAPABILITIES 
WHICH IS ON-LINE WITH THE HOST 
COMPUTER 30 



THE PLAYER 12 USES A TOUCH-TONE 
TELEPHONE 36 TO ENTER THE PER- 
SONAL IDENTIFICATION MESSAGE 
204 



( OPIONAL ) FOR ADDITIONAL 
VERIFICATION, THE PLAYER 12 
ENTERS THE COMPUTER ID OR 
SOFTWARE ID CODE 212 

. r 

i 



THE LOTTERY AUTHORITY 16 ASKS 
THE PLAYER 12 TO SELECT FROM 
A MENU OF LOTTERIES STILL OPEN 
FOR TICKET PURCHASING- THE 
PLAYER 12 USES THE TELEPHONE 
PAD TO KEY IN A NUMBER INDICATING 
THE LOTTERY OF CHOICE 



TO FIG. 7C-2 
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FIG. 7C-2 



FROM FIG. 7C-1 

_i 



THE PLAYER 12 INDICATES HOW THE 
"TICKETS" ARE TO BE PAID FOR-THE 
LOTTERY AUTHORITY 16 ACCEPTS 
OR DECLINES THE PLAYER'S CHOICE 
OF PAYMENT METHOD (IF DECLINED, 
THE CALL IS TRANSFERRED TO A 
LIVE OPERATOR ) 



THE PLAYER 12 ENTERS THE AUTHEN- 
TICATABLE TICKET MESSAGE 208-THE 
HOST COMPUTER 30 READS AND 
AUTHENTICATES THE MESSAGE 208 
TO REVEAL A FRAUDULENT TICKET 
MESSAGE 208 



THE HOST COMPUTER 30 ENSURES 
THAT THE TICKET MESSAGE 208 
REPRESENTS A SET OF VALID LOTTERY 
TICKET NUMBER CHOICES 206, AS WELL 
| AS A VALID IDENTIFICATION MESSAGE 
204 

r -I 

! ( OPTIONAL ) THE PLAYER 1 2 MAY ASK 
! THE LOTTERY AUTHORITY 16 TO READ 
j BACK THE NUMBERS EMBODIED IN THE 
| TICKET MESSAGE 208-A COMPUTER 
J GENERATED VOICE CONFIRMS THE 
S PLAYER'S SELECTION OF NUMBERS AS 
| EMBODIED IN TICKET MESSAGE 208-AT 
! THIS POINT THE PLAYER MAY, FOR ANY 
! REASON, CHOOSE TO CANCEL THIS 
I "TICKET" AND GO ON TO REGISTERING 
! THE NEXT TICKET" 



T CONTINUED ON FIG. 7C-3 
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FIG. 7C-3 



( CONTINUED FROM FIG. 7C-2 ) 



i 

± 



IF THE TICKET MESSAGE 208 IS VALID, 
THEN AN AUTHENTICATABLE MESSAGE 
208 IS GENERATED BY THE HOST COMP- 
UTER 30- THE REGISTRATION MESSAGE 
218 INCORPORATES BOTH THE ORIGINAL 
TICKET MESSAGE 208 AND AN AUTHENTIC- 
ATED DATE / TIME MESSAGE 220- THE 
LOTTERY AUTHORITY 16 PROVIDES THE 
REGISTRATION MESSAGE 218 TO THE 
PLAYER 12 AND THE HOST COMPUTER 
30 FOR FUTURE REFERENCE 



( OPTIONAL ) THE LOTTERY AUTHORITY 
16 MAY AT THIS POINT ASK THE PLAYER 
12 TO CONFIRM THE PURCHASE OF THIS 
TICKET BY ENTERING A YES / NO DIGIT- 
ONCE CONFIRMED, THE "TICKET" IS NON- 
REFUNDABLE 

, 

i 
i 

i 

( OPTIONAL ) THE LOTTERY AUTHORITY 
16 MAY MONITOR WITH A PRESET LIMIT, 
THE NUMBER OF "TICKETS" ANY PLAYER 
12 CAN PURCHASE IN A GIVEN TIME PERIOD 
AND REJECT A REQUEST TO PURCHASE A 
"TICKET" 



i 
I 
I 
I 

T 



TO FIG.7C-4 
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FIG 7C-4 

FROM FIG. 7C-3 

I 

I 

r ± n 

| (OPTIONAL ) THE PLAYER 1 2 CAN ENTER | 

[THE AUTHENTICATABLE REGISTRATION J 

j MESSAGE 21 8 FOR STORAGE IN GAMING ! 

! 1 4-THE FtEGISTERATION MESSAGE 21 8 j 

i SERVES AS AN ABSOLUTE RECEIPT THAT A ! 

i SPECIFIC SET OF NUMBERS WAS REGIS- ; 

S TERED WITH THE LOTTERY AUTHORITY 1 6 ; 

! ON A SPECIFIC DAY AND AT A SPECIFIC TIME ; 



i- — — — — — — — —— — — — — — — — — — — — — — — 

! ( OPTIONAL ) THE PLAYER 12 MAY PRINT 
! OUT FULL TICKET RECEIPTS FROM GAMING 
! COMPUTER 14 FOR RECORD KEEPING 



i 

i 

THE PROCESS IS REPEATED FOR EACH 
TICKET REGISTERED 



i 

t 

WHEN FINISHED.THE PLAYER 12 COMMUN- 
ICATES TO THE LOTTERY AUTHORITY 16 
THAT THERE ARE NO MORE " TICKETS " 
TO REGISTER 

1 

i 

i — 

AS PART OF THE NORMAL ONGOING 
LOTTERY PROCESS, THE WINNING 
NUMBERS ARE DRAWN 



TO FIG. 7C-5 
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FIG. 7C-5 

FROM FIG. 7C-4 

i r 



THE HOST COMPUTEF 
AUTHORITY 16 COMP/ 
NUMBERS AGAINST Al 
HAVE BEEN REGISTEF 


\ 30 OF THE LOTTERY 
^RES THE WINNING 
LL TICKETS WHICH 
1ED 






WINNINGS ARE AWARDED 
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CREDIT CASH-OUT SEQUENCE ( OFF-LINE ) 



FIG. 8 



PLAYER 12 CALLS 
WAGERING EST. 16 
AND ESTABLISHES 
ID-HAND SHAKE 
SEQUENCE-FIG. 5 



WAGERING EST. 16 
PROVIDES BANKING 
ACTIVATION MES- 
SAGE 64 TO PLAYER 
12 



PLAYER 12 ACTIVATES 
BANKING PROGRAM 26- 
GAMING PROGRAM 24 
IS DISABLED ON GAM- 
ING COMPUTER 14 



PLAYER 12 ENTERS 
AMOUNT OF GAMBLING 
CREDIT TO BE CASHED- 
OUT INTO BANKING 
PROGRAM 26 



BANKING PROGRAM 26 
PLACES CREDIT AMOUNT 
INTO CASH-OUT PENDING 
FIELD 

I — 



BANKING PROGRAM 26 
GENERATES AN 
AUTHENTICATABLE 
CASH-OUT MESSAGE 
66 



PLAYER 12 COMMUNICATES 
CREDIT CASH-OUT MESSAGE 
66 TO WAGERING EST.16 



HOST COMPUTER 30 READS 
AND COMMUNICATES CREDIT 
CASH -OUT MESSAGE 66 TO 
REVEAL AMOUNT OF CREDIT 
TO BE CASHED-OUT 







WAGERING EST. 16 
CONFIRMS AMOUNT OF 
CREDIT TO BE CASHED-OUT 







HOST COMPUTER 30 
GENERATESAUTHENTICAT- 
ABLE CASH-OUT ACKNOW- 
LEDGEMENT MESSAGE 68 



TO FIG. 8 
( CONTINUED ) 
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FROM FIG 8 

I 

WAGERING EST. 16 
PROVIDES AUTHENTI- 
CATABLE CASH-OUT 
ACKNOWLEDGEMENT 
MESSAGE 68 TO 
PLAYER 12 



PLAYER 12 ENTERS 
CASH-OUT ACKNOW- 
LEDGEMENT MESSAGE 
68 INTO GAMING 
COMPUTER 14 WHICH 
READS AND AUTHENTI- 
CATES MESSAGE 68 



GAMING COMPUTER 14 
GENERATES AUTHEN- 
TICATABLE DEDUCTION 
VERIFICATION MESSAGE 
70 



PLAYER 12 COMMUNICATES 
DEDUCTION VERIFICATION 
MESSAGE 70 TO WAGERING 
EST. 16 



HOST COMPUTER 30 READS 
AND AUTHENTICATES 
DEDUCTION VERIFICATION 
MESSAGE 70 



GAMING COMPUTER 14 
DISPLAYS REDUCED 
CREDIT BALANCE TO 
PLAYER 12 



WAGERING EST. 16 
CREDITS PLAYER 
( e.g.,CREDIT CARD ) 
FOR VALUE OF GAM- 
BLING CREDIT CASHED- 
OUT 



PLAYER 12 ENTERS 
PROGRAM REACTIVAT- 
ION MESSAGE 72 INTO 
GAMING COMPUTER 14 



GAME PROGRAM 24 
IS REACTIVATED FOR 
CONTINUED GAMBLING 



FIG 8 

( CONTINUED ) 
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START-UP AND R EGISTRATION SEQUENCE 

FIG. 9 



PLAYER 12 WITH GAMING COMPUTER 
14 DIALS UP THROUGH PUBLIC 
TELEPHONE NETWORK 40 AND CON- 
NECTS WITH HOST COMPUTER 30 







PLAYER 12 ENTERS REGISTRATION 
INFORMATION 






PLAYER 12 IS ASSIGNED PERSONAL 
ID MESSAGE 32 






PLAYER 12 IS PROVIDED WITH 
VERIFICATION MESSAGE 88 







PLAYER 12 ENTERS PERSONAL 
IDENTIFICATION MESSAGE 32 
AND VERIFICATION MESSAGE 88 
INTO AUTHENTICATION READ / 
AUTHENTICATE / GENERATE 
DEVICE 82 



DEVICE 82 GENERATES 
AUTHENTIC ATABLE LOG-ON 
MESSAGE 83 



TO FIG. 9 ( CONTINUED ) 
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FROM FIG. 9 

1 

PLAYER 12 ENTERS LOG-ON MESSAGE 
83 INTO GAMING COMPUTER 14 FOR 
COMMUNICATION TO HOST COMPUTER 
30 



HOST COMPUTER 30 READS AND 
AUTHENTICATES MESSAGE 83 



IS 

LOG-ON 
MESSAGE 83 
CORRECT 

? 

YES 



NO 



1 


1 




SYSTEM 




SHUT DOWN 



PLAYER 12 MAY PROCEED TO 
GAMBLE / PURCHASE / REDEEM 
GAMBLING CREDIT 



FIG. 9 



( CONTINUED ) 
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PURCHASE CREDIT SEQUENCE ( ON-LINE ) 

FIG. 10 



HOST COMPUTER 30 PROMPTS 
PLAYER 1 2 - HOW MUCH CREDIT 
IS DESIRED ? 






PLAYER 12RESI 
WITH AMOUNT C 
CREDIT REQUEJ 


3 ONDS AT PROMPT 
>F GAMBLING 
5TED 



HOST COMPUTER 30 OBTAINS 
CREDIT CARD AUTHORIZATION 
FOR REQUESTED AMOUNT 



APPROVED CREDIT AMOUNT 
IS DEPOSITED IN PLAYER 12'S 
GAMBLING CREDIT ACCOUNT 
IN BANKING PROGRAM 77 



PLAYER 12 CAN WAGER ON 
GAMING COMPUTER 14 ON 
A PLURALITY OF GAMES 
OFFERED BY WAGERING EST. 
16 TO THE EXTENT OF 
AVAILABLE GAMBLING CREDIT 
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WAGERING SEQUENCE ( ON-LINE ) 

FIG. 11 
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GAMING COMPUTER 14 
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14 DIALS UP THROUGH PUBLIC 
TELEPHONE NETWORK 40 AND 
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OF ALL OR PART OF GAMBLING 
CREDIT BALANCE IN GAMBLING 
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PROGRAM 77 
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AMOUNT 
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32 INTO GAMING COMPUTER 14 
TO RECONFIRM CREDIT AMOUNT 



HOST COMPUTER 30 READS AND 
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